This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa File: 5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa (raw, json) Hash identifier: eytyjkZwAv73scTtka+wDpj6hepaCfnJjuIuqglSirA= Subject key identifier: E4:1C:1D:FD:79:C2:A4:1A:B8:09:A8:36:A6:EE:9B:3B:92:3D:54:80 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B7DCB4B5BFAFBF82CE7C7F2C68E445FEA Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.129.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4b:5b:fa:fb:f8:2c:e7:c7:f2:c6:8e:44:5f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e41c1dfd79c2a41ab809a836a6ee9b3b923d5480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:41:2c:0d:c3:4f:5d:23:d0:cb:e0:d8:8d: a2:fe:17:c8:c0:49:7d:cc:74:6e:b5:d3:b3:72:54: 53:fd:84:c9:49:df:be:b6:0f:cb:7e:c5:e7:a1:98: 9d:0c:61:38:8e:2f:4a:e9:46:92:6d:72:12:51:ae: 42:19:c7:70:23:38:f8:e8:f8:dd:28:6b:1c:70:7d: bb:61:e0:f8:35:ec:fc:c8:5a:de:8b:26:46:16:a8: 82:5d:18:8a:d9:38:1c:c1:c2:5b:e3:2d:43:de:f0: 86:ad:09:c4:d4:14:84:2a:87:b7:06:4e:55:d8:e5: 4f:01:21:3d:5b:5a:78:43:65:4e:a8:16:74:48:31: 5e:90:31:bb:f6:ed:9a:3c:e1:fd:d2:9c:f7:40:88: d9:2c:76:dd:45:4d:ce:f6:1f:f1:f8:1a:fa:71:d2: c4:40:1f:d1:53:3c:d6:17:33:fe:94:50:ff:db:38: 2b:42:28:07:e1:4c:2d:ef:80:b4:b4:12:d7:59:7c: 18:1e:b7:51:86:c4:ee:8d:9d:6b:db:98:a7:7c:56: ee:d6:81:d0:4f:9a:f5:8b:5a:79:be:00:85:50:b2: 07:64:2b:13:a5:13:ef:11:98:f6:2f:79:e3:a6:71: b4:0b:3b:c4:4b:b5:95:61:25:79:bf:fe:76:1d:9c: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1C:1D:FD:79:C2:A4:1A:B8:09:A8:36:A6:EE:9B:3B:92:3D:54:80 X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.192.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:9e:c8:c1:f5:ad:ed:52:f1:25:76:9e:b3:0f:59:26:11:fb: 29:5a:fd:48:21:52:d9:09:98:8a:68:b7:6c:b4:28:28:69:19: 9e:49:a9:4b:bd:d7:46:af:9c:0f:f7:2a:8d:5e:a5:aa:44:f2: 89:00:3c:38:77:85:9f:a1:0c:c0:3f:83:df:fd:3a:66:e3:ec: a4:99:fd:7a:3d:e9:21:b3:e5:e6:4d:ab:5a:d0:4a:95:db:47: 4e:4e:79:73:29:e9:39:62:58:2b:43:84:06:1d:1a:7a:16:22: 40:86:06:ed:d1:db:15:8f:d8:91:95:9a:f6:ea:c1:59:e4:0a: ea:c1:df:e4:96:3a:f3:4f:bf:f7:4c:39:d9:b0:81:1a:bd:6e: b8:29:5f:95:98:09:ec:b0:07:63:71:c7:1a:1f:35:56:d9:5e: 4c:eb:00:bb:7e:c0:9b:2a:4c:af:cc:52:5a:4d:1a:b8:ab:1b: 4b:16:ea:e5:19:ed:61:ce:b5:cf:7e:6b:3c:80:da:8a:5e:48: ba:16:53:38:05:4d:cb:ca:bd:05:55:7d:09:41:18:cd:8f:70: da:94:d2:ec:f9:81:86:d9:ae:35:e1:0c:6d:1a:94:dd:6b:47: d0:13:02:5e:a7:c6:e2:10:ec:02:4c:48:c4:a7:c2:6a:3f:57: af:1d:46:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0tb+vv4LOfH8saORF/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDFjMWRmZDc5YzJhNDFhYjgwOWE4MzZhNmVlOWIzYjkyM2Q1NDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6xBLA3DT10j0Mvg2I2i/hfIwEl9 zHRutdOzclRT/YTJSd++tg/LfsXnoZidDGE4ji9K6UaSbXISUa5CGcdwIzj46Pjd KGsccH27YeD4Nez8yFreiyZGFqiCXRiK2TgcwcJb4y1D3vCGrQnE1BSEKoe3Bk5V 2OVPASE9W1p4Q2VOqBZ0SDFekDG79u2aPOH90pz3QIjZLHbdRU3O9h/x+Br6cdLE QB/RUzzWFzP+lFD/2zgrQigH4Uwt74C0tBLXWXwYHrdRhsTujZ1r25infFbu1oHQ T5r1i1p5vgCFULIHZCsTpRPvEZj2L3njpnG0CzvES7WVYSV5v/52HZyMNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQcHf15wqQauAmoNqbumzuSPVSAMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvNUJ3ZF9YbkNwQnE0Q2FnMnB1NmJPNUk5VklBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHAMA0G CSqGSIb3DQEBCwUAA4IBAQAKnsjB9a3tUvEldp6zD1kmEfspWv1IIVLZCZiKaLds tCgoaRmeSalLvddGr5wP9yqNXqWqRPKJADw4d4WfoQzAP4Pf/Tpm4+ykmf16Pekh s+XmTata0EqV20dOTnlzKek5YlgrQ4QGHRp6FiJAhgbt0dsVj9iRlZr26sFZ5Arq wd/kljrzT7/3TDnZsIEavW64KV+VmAnssAdjcccaHzVW2V5M6wC7fsCbKkyvzFJa TRq4qxtLFurlGe1hzrXPfms8gNqKXki6FlM4BU3Lyr0FVX0JQRjNj3DalNLs+YGG 2a414QxtGpTda0fQEwJep8biEOwCTEjEp8JqP1evHUbf -----END CERTIFICATE-----Generated at Sun Jan 11 20:35:09 2026 by rpki-client